Compliance creates an opportunity for businesses to create, rethink, and enhance their data management policies and procedures. However, compliance should be achieved with the least amount of business disruption.
In some cases, the most persuasive argument for compliance is the consequence of noncompliance (for example heavy penalties).
Measuring Compliance
Privacy Notice, Policies, and Procedures
Data Subject Rights
Comprehensive Laws (GDPR & alike, PIPEDA)
Sectorial Laws (HIPPA, GLBA, FRCA, COPPA)
State Laws (CCPA, CPRA)
U.S. Industry-Specific Concerns
PCI DSS
GAPP
CARU
NAI
CSA
Standard Contract Clauses
Binding Corporate Rules (BCRs)
EU-US Data Privacy Framework